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Claim 1-6 (Canceled) 



Claim 7 (Currently Amended): A com puter implemented method of controlling access to 
objects stored in electronic form, comprising; 

establishing an object and its associated documents including - loading information into 
tho objoot into ooporato groupo having sopamto privilege access criteria; 

storing the established object and its associated documents in a storage location, wherein 
the established object and its associated document comprising a plurality of ftrowpjgjrf 
information , th e obj e ct compri s ing diotinguiohabl e groups of data; 

establishing access criteria for each group of information of the stored object and 
associated documents , wherein each group of data having an afioociatod accosg criteria for aco e so 
to the - groups - of - data ; 

setting a uoor'c user ID for including d e fining which - us e rs ar e allow e d to - acc ess the 
stored object and its associated documents and associat e d information and user privilegoo ; 

controlling th e access to the databaoo uoing a central proo e ooing unit (CPU) according to 
tho accoQQ criteria , 

fltoring software oodo for oontrolling the op e ration of the CUP in main memory, and 
receiving an access request for the stored object from requestor: 
extracting ID of the requestor from the received access request: 

verifying the requestor bv looking up first in cache memory and if not in cache memory 
then in a database for match with the extracted ID: 

verifying privilege access of the requestor, in the response to the match, bv looking up 
first in cache memory and if not in cache memory men in the database for the r equestor privilege 
access; 

redacting the stored object and associated document by retaining groups of. information 
according to the verified privilege access of the requestor and blankingout groups of information 
that the requestor are not allowed to access; and 

transmitting the redacted object and associated documents to the requestor, 
verifying a uoor'o aoooo fr orkeria including e xtracting th e user's us e r identification form 
th e abjoat roqnoot, verifying firot in cach e m e mory th e user's user id e ntification and id e ntifying 
th e groupo of data to which tho u se r has acc e s s and privil e g e s with r e sp e ct th e reto th e r e by 
allowing controll e d ae eess to individual groups of data - contain e d within th e object by - an 
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individual user according to tho uoor - s privileges in - r e spons e- to - th e- accooo critorio - aaBOciat e d 
with - the groups of data - contained within on object and to predet e rmin e d privileges upon 
verification of uoor ID and us e r privileges, and rotrioving -t he date requested according - to - tho 
user's access criteria and tranomitt i ng a redact e d obj e c t- to - th e iisor, wherein tho rodnotod object ia 
redacted dooumont that oontaino th e groups of inf o«R ft t * on to which tho uoor haa qqcoqq to and 
confidential text that io blocked out. 

Claims 8-16 (Canceled) 

Claim 17 (New): The method of cjaim 7, where in the step of establishing access criteria for 
each group of information of the stored object and associated documents, includes the ability of a 
user to read the contents of the requested object 

Claim 18 (New): The method of claim 7 wherein the step of establishing access criteria for each 
group of information of the stored object and associated documents, includes the ability to 
modify the content of requested object. 

Claim 19 (New): The method of claim 7, wherein the step of redacting the stored object and 
associated documents, includes the ability to delete information contained in the requested 
object. 

Claim 20 (New): The method of claim 7, wherein the step of redacting the stored object and 
associated documents, includes the ability to add data to requested object. 

Claim 21 (New): The method of claim 7, wherein the step of establishing access criteria for each 
group of information of the stored object and associated documents, is determined by a business 
relationship to produce products and defined by the host according to the need of information in 
the product chain. 

Claim 22 (New): A computer software implemented system for controlling access to objects 
stored in an electronic form, the system comprising: 

a host/guest application configured to govern the establishment of an established object 
and the established object's associated documents; 
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a searchable database for storing the established object and the established objects 
associated documents, wherein the established object and the established object's associated 
document comprising a plurality of groups of information; 

a set privilege code for establishing an access criteria for each group of information of the 
stored object and associated documents; and 

a set ID code for setting a user ID for the established object and the established object's 
associated documents stored in the searchable database; 

wherein the host/guest application is further configured to: 

receive an access request for the established object from a requestor, 
extract the user DO of the requestor from the received access request, 
verify the requestor by looking up first in a cache memory and if not in the cache 
memory then in the searchable database for a match with an extracted user ID, 

verify the access criteria of the requestor in response to the match, by looking up 
first in the cache memory and if not in cache memory then in the database for the requestor 
access cri teria, 

redact the established object and the established object's documents by retaining 
groups of information in accordance with the verified access criteria of the requestor and 
blanking out groups of information for which Llic requestor does not have access, and 

transmit the redacted established object and the established object's documents to 

the requestor. 

Claim 23 (New): The system of claim 22, wherein the set privilege code further includes read 
code to read the contents of the requested object. 

Claim 24 (New): The system of claim 22, wherein the set privilege code further includes modify 
code to modify the contents of the requested object. 

Claim 25 (New): A computer apparatus for controlling access to objects stored in electronic 

form, comprising: 

means for establishing an object and its associated documents 

means for storing the established object and its associated documents in a storage 

location, wherein the established object and its associated documents in a storage location, 

wherein the established object and its associated document comprising a plurality of groups of 

information; 
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means for establishing access criteria for each group of information of the stored object 
and associated documents; 

means for setting a user ID for the stored object and its associated documents; 

means for receiving an access request for the stored object from a requestor; 

means for extracting ID of the requestor from the received access request; 

means for verifying the requestor by looking up first in the cache memory and if not in 
the cache memory dien in a database for a match with the extracted ID; 

means for verifying the privilege access of the requestor, in response to the match, by 
looking up first in the cache memory and if not in cache memory then in the database for the 
requestor privilege access; 

means for redacting the stored object and associated documents by retaining groups of 
information according to the verified privilege access of the requestor and blanking out groups of 
information that the requestor arc not allowed to access; and 

means for transmitting the redacted object and associated documents the requestor- 
Claim 26 (New): The apparatus of claim 25, wherein means for establishing access criteria for 
each group of information of the stored object and associated documents, further includes means 
of a user to read the contents of the requested object, 

Claim 27 (New): The apparatus of claim 25, wherein means for establishing access criteria for 
each group of information of the stored object and associated dncnmftnrs, fnrthftr includes means 
to modify the contents of the requested object 

Claim 28 (New): The apparatus of claim 25, wherein means for redacting the stored object 
associated documents, further includes means to delete information contained in the requested 
object 

Claim 29 (New): The apparatus of claim 25, wherein means for redacting the stored object and 
associated documents, further includes means to add data to requested object. 
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